File permissions for MLS install

Discussions around using and interfacing with the Church MLS program.
User avatar
rbeede
Member
Posts: 201
Joined: Sat Apr 02, 2011 12:33 pm
Contact:

File permissions for MLS install

Postby rbeede » Fri Aug 12, 2011 8:09 am

Currently on our ward computer we have separate user accounts for each position for who uses MLS. We are running Windows XP.

Each account is in the Administrators group I believe to allow for MLS to update itself.

I'd like to only have 1 Admin account so others won't accidentally mess with network settings or other software installs. I'd prefer to not use Power Users either.

What file permissions would have to be enabled on the MLS directory to permit this? Should I just enable full permissions on the entire MLS folder? Are there any other folders I have to get as well?

User avatar
aebrown
Community Administrator
Posts: 14686
Joined: Tue Nov 27, 2007 8:48 pm
Location: Sandy, Utah

Postby aebrown » Fri Aug 12, 2011 8:32 am

rbeede wrote:Currently on our ward computer we have separate user accounts for each position for who uses MLS. We are running Windows XP.

Each account is in the Administrators group I believe to allow for MLS to update itself.

I'd like to only have 1 Admin account so others won't accidentally mess with network settings or other software installs. I'd prefer to not use Power Users either.

What file permissions would have to be enabled on the MLS directory to permit this? Should I just enable full permissions on the entire MLS folder? Are there any other folders I have to get as well?


The official installation instructions say to use a single account which must be an administrator account. You're welcome to experiment with lesser permissions, but there is no documentation that would guide you -- I'm guessing you would be doing a lot of trial and error.

And as you noted, MLS updates require administrator permissions. This was recently confirmed by a Church employee in this post. I doubt that it is simply a matter of file permissions. With a nonstandard installation, you also run the risk of reducing your support options -- you may not find Local Unit Support to be very anxious to help you troubleshoot any problems you may have. But if you understand all that and still choose to proceed, then it could be an interesting research project for which others would appreciate hearing the results.
Questions that can benefit the larger community should be asked in a public forum, not a private message.

jdlessley
Community Moderators
Posts: 6522
Joined: Sun Mar 16, 2008 11:30 pm
Location: USA, TX

Postby jdlessley » Fri Aug 12, 2011 10:37 am

rbeede wrote:What file permissions would have to be enabled on the MLS directory to permit this? Should I just enable full permissions on the entire MLS folder? Are there any other folders I have to get as well?
I have done some limited testing with MLS in Windows XP. Setting the permissions for the C:\Documents and Settings\All Users\LDS Church\MLS folder and all child folders as well as the backup location, C:\data-backup by default, to Modify for Users will take care of a majority of MLS use situations.

The real problem encountered is the update of MLS during send/receives. I have not looked into this in any detail since I have had no reason to do so. I suspect that any update requires the Windows Installer Service and registry key(s) permissions of an administrator. The little research I have done on this indicates that there are methods to overcome this. But it looked to me to be something the software updater, in this case the MLS developers, would have to permit.

It is the lack of control of when updates will come and how many times other MLS users have opted to defer an update that can create serious problems. Most MLS updates sent through a send/receive can be deferred three times before it will be transmitted and installed on the fourth send/receive without option to cancel by the MLS user. Some updates have been pushed through effectively bypassing this end user option to defer an update.

I would not want to risk losing access to MLS or even loss of data because of a software update that could not be completed.
JD Lessley
Have you tried finding your answer on the LDS.org Help Center page or the LDSTech wiki?

russellhltn
Community Administrator
Posts: 20734
Joined: Sat Jan 20, 2007 2:53 pm
Location: U.S.

Postby russellhltn » Fri Aug 12, 2011 11:46 am

Part of MLS install is the installation of a separate instance of Java. And there are times when that is updated. That's where I think that's where you can run into problems trying to install with less than Admin permissions.

I'll add that this has been discussed a few time before. None of us are happy about having MLS users have Admin privileges to Windows, but the alternative is to be a unpaid, unsupported tester. Not worth it to me.
Have you searched the Wiki?
Try using a Google search by adding "site:tech.lds.org/wiki" to the search criteria.


Return to “MLS Support, Help, and Feedback”

Who is online

Users browsing this forum: No registered users and 2 guests